"""Some of these sub-directories are actually symlinks to encrypted DMGs, again depending on who owns the IP."""

That is how I handle customer proprietary data also for customers who want their work encrypted.